GIAC Exam GASF Topic 1 Question 57 Discussion

Actual exam question for GIAC's GASF exam

Question #: 57
Topic #: 1

[All GASF Questions]

Where would an examiner find evidence of an iOS update to device from one version to another?

ANOR memory

BSystem partition

CData partition

DSIM card

Show Suggested Answer

Suggested Answer: B

by Delbert at Aug 01, 2025, 12:55 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

5 hours ago

I'm pretty sure it's not D) SIM card. That's for carrier-specific data, not iOS updates.

upvoted 0 times

...

2 days ago

I think the answer is B) System partition. That's where the iOS update files are typically stored.

upvoted 0 times

...